AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 



1 1 . (Currently amended) A method for sharing a secure communication 

2 session, the method comprising: 

3 establishing a secure socket layer (SSL) session between a client and a 

4 first server, wherein the first server publishes on a database a set of session state 

5 information for the SSL session, and wherein the SSL session state information 

6 includes: 

7 an SSL session identifier; 

8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 receiving a message from the client at a second server, wherein the 

17 message includes the SSL session identifier which identifies the SSL session 

1 8 between the client and the first server, and wherein the second server contains 

19 different content and performs different functions from the first server; 

20 determining that an SSL session corresponding to the received session 
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21 identifier is not configured on the second server; 

22 querying the database with the received SSL session identifier; 

23 retrieving from the database identifier the SSL session state information 

24 which corresponds to the received SSL session identifier and which is published 

25 by the first server;[[;]] 

26 establishing an SSL session between the client and the second server with 

27 the same SSL session identifier based on the retrieved SSL session state 

28 information; and 

29 using the running message digest to send a second message from the 

30 second server to the client through the SSL session without establishing a separate 

31 SSL session between the client and the second server. 

1 2-8. (Canceled). 

1 9. (Canceled). 

1 10. (Previously presented) The method of claim 1, wherein retrieving the 

2 running message digest includes authenticating and authorizing the first server. 

1 11-12 (Canceled). 

1 13. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method for sharing a secure communication session, the method comprising: 

4 establishing an SSL session between a client and a first server, wherein the 

5 first server publishes on a database a set of session state information for the SSL 

6 session, and wherein the SSL session state information includes: 

7 an SSL session identifier; 
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8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 receiving a message from the client at a second server, wherein the 

17 message includes the SSL session identifier which identifies the SSL session 

1 8 between the client and the first server, and wherein the second server contains 

19 different content and performs different functions from the first server; 

20 determining that an SSL session corresponding to the received session 

21 identifier is not configured on the second server; 

22 querying the database with the received SSL session identifier; 

23 retrieving from the database the identifier s SL session state information 

24 which corresponds to the received SSL session identifier and which is published 

25 by the first server; and 

26 establishing an SSL session between the client and the second server with 

27 the same SSL session identifier based on the retrieved SSL session state 

28 information; and 

29 using the running message digest to send a second message from the 

30 second server to the client through the SSL session without establishing a separate 

31 SSL session between the client and the second server. 

1 14-20. (Canceled). 

1 21. (Canceled). 
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22. (Previously presented) The computer-readable storage medium of 
claim 13, wherein retrieving the running message digest includes authenticating 
and authorizing the first server. 



1 23-24 (Canceled). 

1 25. (Currently amended) An apparatus that shares a secure communication 

2 session, comprising: 

3 an establishing mechanism configured to establish an SSL session 

4 between a client and a first server, wherein the first server publishes on a database 

5 a set of session state information for the SSL session, and wherein the SSL 

6 session state information includes: 

7 an SSL session identifier; 

8 a read key for encrypting communications from the client; 

9 a write key for encrypting communications from the first server; 

10 an encrypted running message digest; and 

11 a message digest key which is used to encrypt the running message 

12 digest; and 

13 wherein the first server continually changes the running message 

14 digest as messages are sent through the SSL session, and wherein the first server 

15 publishes updates to the running message digest to the database; 

16 a receiving mechanism configured to receive a message from the client at 

17 a second server which identifies the SSL session between the client and the first 

18 server, wherein the first message includes the SSL session identifier, and wherein 

19 the second server contains different content and performs different functions from 

20 the first server; 

21 a determination mechanism configured to determine that an SSL session 

22 corresponding to the received session identifier is not configured on the second 
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23 server; 

24 a query mechanism configured to query the database with the received 

25 SSL session identifier; 

26 a retrieving mechanism configured to retrieve from the database identifier 

27 the SSL session state information which corresponds to the received SSL session 

28 identifier and which is published by the first server; 

29 a second establishment mechanism configured to establish an SSL session 

30 between the client and the second server with the same SSL session identifier 

3 1 based on the retrieved SSL session state information; and 

32 a sending mechanism configured to use the running message digest to 

33 send a second message from the second server to the client through the SSL 

34 session without establishing a separate SSL session between the client and the 

35 second server. 

1 26-32. (Canceled) 

1 33. (Previously presented) The apparatus of claim 25, wherein the 

2 retrieving mechanism is configured to authenticate and authorize the first server 

3 prior to retrieving the running message digest. 

1 34-35 (Canceled). 
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